[Release][Offi] GodMode Hack (Invisible/1Hit)

[jooodzszsz]

Originally Posted by Rodopushin

Sometimes the inject isn't working (Inject successful, but Neuz not starting/loading), just try a few more times if it doesen't work for the first time. And don't forget to start as admin

Rightclick -> Properties -> Always start as Admin | works well too

[aglibuto]

.mode unfreeze
.mode talk

what is this commands for?

[jooodzszsz]

Originally Posted by aglibuto

.mode unfreeze
.mode talk

what is this commands for?

This removes freez/mute when a moderator feels funny and freez / mute you (he have the rights ingame)

[icedu65]

Hello guys, do you have a mode to inspect?
thx

[aglibuto]

Just wondering if u can do this too on a private server like iblis?

[jooodzszsz]

Originally Posted by aglibuto

Just wondering if u can do this too on a private server like iblis?

Most pServer have a fixx that check the authlevel, Galalab made the mistake to check the unsafe socketID

[miniman06]

did you recompile partially the official leaked source? (ida shows tons of unreferenced code), can't find anywhere the recent source code

[cookie69]

Originally Posted by miniman06

did you recompile partially the official leaked source? (ida shows tons of unreferenced code), can't find anywhere the recent source code

Probably yes. Neuz source code is the best Packet Editor. You just need to take and modify the network stuff to make your best private hacks (I use this method since a long time).

Basically, you can customize the CDPClient (for instance) with your own modified functions to send modified packets (like the eggs dupe, angels dupe, modify mode,change guild name, overflows,crash packets,.. and other stuff).
All you need is to find the address of the SEND(3 params) function and the g_DPlay pointer, the rest is just a smart copy past from the offi v15 source.

Example for Modify mode:

typedef BOOL(__thiscall * Send_t)(void * ecx, LPVOID lpData, DWORD dwDataSize, DWORD dpidTo);
BOOL  __fastcall MySend(DWORD *ecx, void *edx, LPVOID lpData, DWORD dwDataSize, DWORD dpidTo);
extern Send_t pSend;

DWORD* g_DPlay = NULL;
/*
you can get g_DPlay value from hooking, just save the ECX value when MySend function is get called by the client (for example when the player jumps). Hooking is easy in any illegal server, in the offi you may need bypass or make your own proxy and force Neuz to connect to it, but you will need to do all the packets decryption and so. The other way is just to find a static value.
*/

Send_t pSend;
pSend = (Send_t)((DWORD)g_hExeModule + dwSendOffset);
.......
#define	SEND( ar, theClass, idTo ) \
	int nBufSize;	\
	LPBYTE lpBuf	= ar.GetBuffer( &nBufSize );	\
	if(theClass)pSend(theClass, lpBuf, nBufSize, idTo);


......

void SendModifyMode(DWORD dwMode, BYTE f, DWORD idFrom, DPID dpid)
{
	BEFORESENDSOLE(ar, PACKETTYPE_MODIFYMODE, DPID_UNKNOWN);
	ar << dwMode << f << idFrom << dpid;
	SEND(ar, g_DPlay, DPID_SERVERPLAYER);
}

// to be invisible
SendModifyMode(TRANSPARENT_MODE, (BYTE)1, (DWORD)0, (DWORD)0);

// to not be invisible
SendModifyMode(TRANSPARENT_MODE, (BYTE)0, (DWORD)0, (DWORD)0);

[miniman06]

Originally Posted by cookie69

Probably yes. Neuz source code is the best Packet Editor. You just need to take and modify the network stuff to make your best private hacks (I use this method since a long time).

Basically, you can customize the CDPClient (for instance) with your own modified functions to send modified packets (like the eggs dupe, angels dupe, modify mode,change guild name, overflows,crash packets,.. and other stuff).
All you need is to find the address of the SEND(3 params) function and the g_DPlay pointer, the rest is just a smart copy past from the offi v15 source.

Example for Modify mode:

typedef BOOL(__thiscall * Send_t)(void * ecx, LPVOID lpData, DWORD dwDataSize, DWORD dpidTo);
BOOL  __fastcall MySend(DWORD *ecx, void *edx, LPVOID lpData, DWORD dwDataSize, DWORD dpidTo);
extern Send_t pSend;

DWORD* g_DPlay = NULL;
/*
you can get g_DPlay value from hooking, just save the ECX value when MySend function is get called by the client (for example when the player jumps). Hooking is easy in any illegal server, in the offi you may need bypass or make your own proxy and force Neuz to connect to it, but you will need to do all the packets decryption and so. The other way is just to find a static value.
*/

Send_t pSend;
pSend = (Send_t)((DWORD)g_hExeModule + dwSendOffset);
.......
#define	SEND( ar, theClass, idTo ) \
	int nBufSize;	\
	LPBYTE lpBuf	= ar.GetBuffer( &nBufSize );	\
	if(theClass)pSend(theClass, lpBuf, nBufSize, idTo);


......

void SendModifyMode(DWORD dwMode, BYTE f, DWORD idFrom, DPID dpid)
{
	BEFORESENDSOLE(ar, PACKETTYPE_MODIFYMODE, DPID_UNKNOWN);
	ar << dwMode << f << idFrom << dpid;
	SEND(ar, g_DPlay, DPID_SERVERPLAYER);
}

// to be invisible
SendModifyMode(TRANSPARENT_MODE, (BYTE)1, (DWORD)0, (DWORD)0);

// to not be invisible
SendModifyMode(TRANSPARENT_MODE, (BYTE)0, (DWORD)0, (DWORD)0);

Did that a while ago thanks,just to confirm did they change all the PACKETTYPE ids ?

and your example wouldn't just work because you would have to bruteforce the dpid ?

[cookie69]

Originally Posted by miniman06

Did that a while ago thanks,just to confirm did they change all the PACKETTYPE ids ?

and your example wouldn't just work because you would have to bruteforce the dpid ?

Yes all packet_types changed for v21 but it is not hard to find them in Neuz.
This worked in my local v15 server, but it is not hard to make a loop and increase the dpid until you find it, I never tried it on the offi because no one would think a company like that would make such a mistake lol.

[miniman06]

Originally Posted by cookie69

Yes all packet_types changed for v21 but it is not hard to find them in Neuz.
This worked in my local v15 server, but it is not hard to make a loop and increase the dpid until you find it, I never tried it on the offi because no one would think a company like that would make such a mistake lol.

seems like it would be pretty fun to bind lua with this packet functions to experiment around and maybe hook some vtables while at it

[Oliverfrank]

Hey kann mir bitte jemand helfen der hack klappt ned bei mir

[jooodzszsz]

Originally Posted by Oliverfrank

Hey kann mir bitte jemand helfen der hack klappt ned bei mir

Was klappt denn nicht?

[Honorably01]

Hallo, ich habe deine Schritte befolgt. Das Spiel startet auch und supersonic zeigt ebenfalls Success an. Aber sobald ich einen der Befehle im ingame Chat eingebe passiert nichts. Ich kann zB keine mops onehitten etc.
Habe ich da was falsch verstanden?

[Connor McMecha]

Originally Posted by Honorably01

Hallo, ich habe deine Schritte befolgt. Das Spiel startet auch und supersonic zeigt ebenfalls Success an. Aber sobald ich einen der Befehle im ingame Chat eingebe passiert nichts. Ich kann zB keine mops onehitten etc.
Habe ich da was falsch verstanden?

add mich mal auf Discord, helfe gerne

John Casadesus#8623